Data controller of personal data processing.
REER SpA, VAT number 05997110019 is the data controller of the processing of your personal data.
As data subject (potential or active customer, potential or active supplier, candidate employee or collaborator, visitor, guest) we inform you that:
The registered office of the Data Data controller is in Corso Re Umberto 2 – 10121 Torino
The contacts of the Data Data controller at the main establishment are:
Another processing establishment can be identified at REER SpA - Illumination Division, VAT Number 05997110019, Via Meucci, 77, 10040, Leinì, (TO), Italy
REER SpA processes common identifiable personal data such as: name, surname, company name, address, telephone contact, e-mail address, any possible bank details.
The personal data of the data subjects are collected and processed by REER SpA in an appropriate, relevant, limited to the purposes, lawful, correct and transparent way.
The determined, explicit and legitimate purposes of collecting and processing personal data are:
a) Fulfillment of contractual, pre-contractual, fiscal obligations or of law deriving from existing relationships;
b) Holding and updating administrative accounting and other obligations required by laws, regulations and notes on tax matters;
c) Administrative and accounting purposes (management of orders and ordinary correspondence with customers, suppliers, external support entities also in outsourcing);
d) Purposes strictly connected to the management of employees and collaborators - obligations deriving from national laws;
e) Fulfillment of obligations deriving from national laws;
f) Fulfillment of obligations deriving from community laws, rules and regulations;
g) Safeguard and pursuit of a legitimate interest of the Data Data controller or of third parties, provided that the interests or the fundamental rights and freedoms of the data subject are not prevailing, in particular if they are minor; Among the legitimate interests of the data controller are identified:
h) Health and safety management of the workers;
i) Protection of corporate assets and safety of persons by means of video surveillance and video recording systems.
Legal grounds of the processing carried out for the purposes referred to in points a), b), c), is the contractual obligation and the pre-contractual liability of the data Data controller. The communication of personal data referred to in points a), b), c), d) is therefore a legal and contractual obligation and a necessary requirement for the conclusion of a contract.
Subject to its explicit and free consent (Article 7 of the GDPR - EU Regulation 679/2016) REER SPA may process your personal data for marketing purposes (sending commercial, promotional and advertising messages on the products and / or services of the Data Data controller by email, ordinary mail, sms to telephone contacts, newsletter).
Personal data will be processed at the establishment of the data data controller by designated and authorized persons, under the authority of the data controller and trained on the regulatory principles and on the logical and technological safety procedures (Article 32, paragraph 4). Processing is carried out by means of operations or complexes of manual or computerized operations such as: collection, registration, organization, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction.
Personal data may be communicated by the data controller, without consent of the data subject, and for purposes related to pre-contractual measures, to the execution of a contract or legal obligation of the data controller exclusively to the following subjects or categories of subjects:
The communication of personal data to processors is carried out by the Data controller) as a legal or contractual obligation. No data is disseminated by the data controller. Processors will carry out data processing activities as data controllers (Article 28) or independent data controllers, as established in the designation contracts, following the instructions given by the data controller or regarding the nature of the processing. The data controller will not transfer personal data to a third country or to an international organization.
The data collected and processed for the purposes referred to in points a), b), c), will be kept, by law, for at least ten years from their last use in an accounting record.
The data collected and processed as indicated in points d), h), are kept by the data controller for the duration of the contract of each employee/collaborator and for the excess time necessary to complete the fulfillment of all obligations. The processing period for points d) and h) is set by the data controller for more 15 years to guarantee every judicial protection.
The duration of the processing referred to in points e), f) is determined by the same national laws and by the laws, rules and regulations of the Community in which the processing is carried out and to which reference is made.
The processing of personal data referred to in point g) and relating to direct marketing will have a duration fixed by the data controller for 3 years, in the event that data subject renews or withdraws the consent upon expiry;
For the processing referred to in point g) and concerning data traffic for network security, the established duration is 6 months.
The duration of the processing referred to in point i) has a duration of 24 hours set by the data controller, unless the data are requested by the control and judicial bodies.
The data subject has the right (guaranteed by the data controller) to: